[openib-general] NULL ptr derefence

[Grant Grundler]

System panic'd when I ran the "reload_ib" script with NULL ptr.
Odd that I didn't see any problems with switching around module versions
by hand before. Scripting it seems to have exposed more race conditions
or something.

Sorry, I'm not sure which rev of openib code was running on this machine.
Is there some way I can tell what SVN version from the binaries in
/lib/modules/'uname -r' directory?

It's possible this was already fixed...

thanks,
grant


ionize:/usr/src/linux-2.6# reload_ib 
+ IPoIB=113
+ ifconfig ib0 down
Unable to handle kernel NULL pointer dereference (address 0000000000000000)
ib_mad1[1882]: Oops 8813272891392 [1]
Modules linked in: ib_ipoib ib_sdp ib_cm ib_sa ib_mthca ib_mad ib_core tg3 dm_mod e1000 e100

Pid: 1882, CPU 1, comm:              ib_mad1
psr : 0000101008026018 ifs : 800000000000038b ip  : [<a0000002001214d0>]    Not tainted
ip is at ib_sa_mcmember_rec_callback+0x90/0xe0 [ib_sa]
unat: 0000000000000000 pfs : 000000000000048d rsc : 0000000000000003
rnat: 0000000000000000 bsps: 0000000000000000 pr  : 000000000000a941
ldrs: 0000000000000000 ccv : 0000000000000000 fpsr: 0009804c8a74433f
csd : 0000000000000000 ssd : 0000000000000000
b0  : a000000200121a30 b6  : a000000100002d70 b7  : a000000200121440
f6  : 1003e8080808080808081 f7  : 1003e0000000000001400
f8  : 1003e0000000000001400 f9  : 1003e00000000000027d8
f10 : 1003e000000000ff00000 f11 : 1003e000000003b5f2d38
r1  : a000000200320000 r2  : a000000200123270 r3  : e0000001014a7d98
r8  : a000000200121440 r9  : 0000000000000006 r10 : 0000000000000003
r11 : 0000000000000001 r12 : e0000001014a7d20 r13 : e0000001014a0000
r14 : 0000000000000000 r15 : e0000002ead26588 r16 : a0000002001252d8
r17 : 0000000000000000 r18 : 0000000000000001 r19 : 0000000000000000
r20 : e00000000f05cf60 r21 : 0000000000000000 r22 : e00000000f05cf60
r23 : 0000000000000000 r24 : 0000000000000000 r25 : 0000000000200200
r26 : e000000100d22e70 r27 : 0000001008026018 r28 : e0000002e907c418
r29 : 0000000000100100 r30 : 0000000000000000 r31 : a000000200125da0

Call Trace:
 [<a00000010000f3a0>] show_stack+0x80/0xa0
                                sp=e0000001014a78e0 bsp=e0000001014a1190
 [<a00000010000fc00>] show_regs+0x7e0/0x800
                                sp=e0000001014a7ab0 bsp=e0000001014a1130
 [<a000000100033730>] die+0x150/0x1c0
                                sp=e0000001014a7ac0 bsp=e0000001014a10f0
 [<a000000100053b70>] ia64_do_page_fault+0x370/0x980
                                sp=e0000001014a7ac0 bsp=e0000001014a1088
 [<a00000010000a780>] ia64_leave_kernel+0x0/0x260
                                sp=e0000001014a7b50 bsp=e0000001014a1088
 [<a0000002001214d0>] ib_sa_mcmember_rec_callback+0x90/0xe0 [ib_sa]
                                sp=e0000001014a7d20 bsp=e0000001014a1030
 [<a000000200121a30>] send_handler+0x110/0x280 [ib_sa]
                                sp=e0000001014a7d70 bsp=e0000001014a0fe0
 [<a0000002000d26f0>] ib_mad_complete_send_wr+0x330/0x380 [ib_mad]
                                sp=e0000001014a7d70 bsp=e0000001014a0f90
 [<a0000002000d2920>] ib_mad_send_done_handler+0x1e0/0x2e0 [ib_mad]
                                sp=e0000001014a7d70 bsp=e0000001014a0f20
 [<a0000002000d2f00>] ib_mad_completion_handler+0x180/0x200 [ib_mad]
                                sp=e0000001014a7d80 bsp=e0000001014a0ed0
 [<a0000001000b1490>] worker_thread+0x3d0/0x520
                                sp=e0000001014a7db0 bsp=e0000001014a0e48
 [<a0000001000bb9e0>] kthread+0x160/0x180
                                sp=e0000001014a7e20 bsp=e0000001014a0e10
 [<a000000100011410>] kernel_thread_helper+0xd0/0x100
                                sp=e0000001014a7e30 bsp=e0000001014a0de0
 [<a0000001000090e0>] start_kernel_thread+0x20/0x40
                                sp=e0000001014a7e30 bsp=e0000001014a0de0
 + rmmod ib_ipoib ib_sdp ib_cm ib_sa ib_mthca ib_mad ib_core
<6>NET: Unregistered protocol family 27